MAL-2025-162160 Malicious code in nokire-abimanyu46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df9ec52050668e3286b2c4a230cf8c7b5597310ffac06cf4998eb63ba18d3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166086 Malicious code in slamet-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce3e94aa84cf51578c9b4aa09c178d754d10b15f9a8c63cf7a6688ab94f1fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156414 Malicious code in inal-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d3a2650cf73169abf02441d628b17d2e962f0c9b416cba412d2d1c906e0dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154493 Malicious code in diago-kulp-kabloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6d08e6eff2d693e7aebc7dc3ec118586cc22ef3fe1defb99ba16e79755cdb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151850 Malicious code in aiboa-molipe-amuaaiuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ee4b66724df25a49882334d10db950147d415cb0f6383bce94d028500bf264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d382f4d4bd9e914fd450750001fcf1303b7e0175e4f62241d0af84ced2fb4784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0479cd7ed9763457fb033fe296d147b648b6a44e53c2362e5b7569e32f3f67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-149329

Malicious code in teagood-nalikami8 npm...

Malicious code in ilang-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4357c9320a6cfe95ebcf83778911e5f91c6703415cc7f7d38c22951cd6f06366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147630

Malicious code in trevora-cir128 npm...

Malicious code in tealoveness10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb75fdd8743c216305fd9ae264b98c4c97ad17c1442f8f54f2ba5d2c46854584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae91e04a3de70c2959781c9be1e4de3963b246da570e89cbfa52335828af1226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nuyasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3622a572a2abbc86022fb7df5e5b328d71c86bb403a0b35c643cbac94e55704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagiaas-fimokafiganu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23fa34d42e3e6928fde6715d00726361f177cf801a71c762157b4807d8e5534e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2612d0789bf6711b5c6a32a44a9ecc99ae2992fc85ed12c5786aa6b21360374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f87f073af266c91778b1e536c4455149017e438037b80d51e18bd93871c5fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gobagilai-janqigaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7687ea6e4ee78f059103f92087a74d3de469e69c94b5f4741baa759f457be266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b228a231ade3f2349cf4184ac4731ba418565168aae99dbd414460d1bb21355a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5ab704a2887617bbc85bb31af9b3ad0e8e668b6426766c4ca7b8b022e5e0ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nati-ylara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cc78f645af1c5ac0f28d14021662e1c9d44a3ede40ad2234ef1e4ac20ba015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...